Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in nhmpy (PyPI) MAL-2026-5302, PYSEC-2026-583 | Malicious | Not scored | 08 Jun, 2026 | PyPI nhmpy |
Malicious release: Malicious code in zer0one-dnslog (npm) MAL-2026-5366 | Malicious | Not scored | 08 Jun, 2026 | npm zer0one-dnslog |
Malicious release: Malicious code in consumerweb-authflow (npm) MAL-2026-5297 | Malicious | Not scored | 07 Jun, 2026 | npm consumerweb-authflow |
Malicious release: Malicious code in bittensor-burn-watch (PyPI) MAL-2026-5292 | Malicious | Not scored | 07 Jun, 2026 | PyPI bittensor-burn-watch |
Malicious release: Malicious code in clip-logger (PyPI) MAL-2026-5293 | Malicious | Not scored | 07 Jun, 2026 | PyPI clip-logger |
Malicious release: Malicious code in sequoia-engineering (npm) GHSA-5r3g-3x22-r8qm, MAL-2026-5291 | Malicious | Not scored | 07 Jun, 2026 | npm sequoia-engineering |
Malicious release: Malicious code in @solana-labs/web3-js (npm) MAL-2026-5363 | Malicious | Not scored | 07 Jun, 2026 | npm @solana-labs/web3-js |
Malicious release: Malicious code in @solana-labs/etherjs (npm) MAL-2026-5362 | Malicious | Not scored | 07 Jun, 2026 | npm @solana-labs/etherjs |
Malicious release: Malicious code in unifi-portal (npm) MAL-2026-5289 | Malicious | Not scored | 06 Jun, 2026 | npm unifi-portal |
Malicious release: Malicious code in encrypted-archive (npm) MAL-2026-5286 | Malicious | Not scored | 06 Jun, 2026 | npm encrypted-archive |
Malicious release: Malicious code in uisp-connector (npm) MAL-2026-5288 | Malicious | Not scored | 06 Jun, 2026 | npm uisp-connector |
Malicious release: Malicious code in uhd-setup (npm) MAL-2026-5287 | Malicious | Not scored | 06 Jun, 2026 | npm uhd-setup |
Malicious release: Malicious code in dynamo-release (PyPI) MAL-2026-5274, PYSEC-2026-581 | Malicious | Not scored | 06 Jun, 2026 | PyPI dynamo-release |
Malicious release: Malicious code in napari-ufish (PyPI) MAL-2026-5275, PYSEC-2026-604 | Malicious | Not scored | 06 Jun, 2026 | PyPI napari-ufish |
Malicious release: Malicious code in nucbox (PyPI) MAL-2026-5276, PYSEC-2026-605 | Malicious | Not scored | 06 Jun, 2026 | PyPI nucbox |
Malicious release: Malicious code in pantheon-toolsets (PyPI) MAL-2026-5277, PYSEC-2026-608 | Malicious | Not scored | 06 Jun, 2026 | PyPI pantheon-toolsets |
Malicious release: Malicious code in spateo-release (PyPI) MAL-2026-5278, PYSEC-2026-585 | Malicious | Not scored | 06 Jun, 2026 | PyPI spateo-release |
Malicious release: Malicious code in uprobe (PyPI) MAL-2026-5279, PYSEC-2026-611 | Malicious | Not scored | 06 Jun, 2026 | PyPI uprobe |
Malicious release: Malicious code in bramin (PyPI) MAL-2026-5280, PYSEC-2026-578 | Malicious | Not scored | 06 Jun, 2026 | PyPI bramin |
Malicious release: Malicious code in executor-http (PyPI) MAL-2026-5281, PYSEC-2026-590 | Malicious | Not scored | 06 Jun, 2026 | PyPI executor-http |
Malicious release: Malicious code in mrbios (PyPI) MAL-2026-5282, PYSEC-2026-594 | Malicious | Not scored | 06 Jun, 2026 | PyPI mrbios |
Malicious release: Malicious code in okite (PyPI) MAL-2026-5283, PYSEC-2026-606 | Malicious | Not scored | 06 Jun, 2026 | PyPI okite |
Malicious release: Malicious code in synago (PyPI) MAL-2026-5284, PYSEC-2026-609 | Malicious | Not scored | 06 Jun, 2026 | PyPI synago |
Malicious release: Malicious code in ufish (PyPI) MAL-2026-5285, PYSEC-2026-610 | Malicious | Not scored | 06 Jun, 2026 | PyPI ufish |
Malicious release: Malicious code in cmd2func (PyPI) MAL-2026-5290, PYSEC-2026-579 | Malicious | Not scored | 06 Jun, 2026 | PyPI cmd2func |
Malicious release: Malicious code in magique-ai (PyPI) MAL-2026-5294, PYSEC-2026-593 | Malicious | Not scored | 06 Jun, 2026 | PyPI magique-ai |
Malicious release: Malicious code in coolbox (PyPI) MAL-2026-5295, PYSEC-2026-580 | Malicious | Not scored | 06 Jun, 2026 | PyPI coolbox |
Malicious release: Malicious code in magique (PyPI) MAL-2026-5296, PYSEC-2026-592 | Malicious | Not scored | 06 Jun, 2026 | PyPI magique |
Malicious release: Malicious code in executor-engine (PyPI) MAL-2026-5298, PYSEC-2026-589 | Malicious | Not scored | 06 Jun, 2026 | PyPI executor-engine |
Malicious release: Malicious code in pantheon-agents (PyPI) MAL-2026-5299, PYSEC-2026-607 | Malicious | Not scored | 06 Jun, 2026 | PyPI pantheon-agents |
Malicious release: Malicious code in funcdesc (PyPI) MAL-2026-5300, PYSEC-2026-591 | Malicious | Not scored | 06 Jun, 2026 | PyPI funcdesc |
Malicious release: Malicious code in mflux-streamlit (PyPI) MAL-2026-5301, PYSEC-2026-582 | Malicious | Not scored | 06 Jun, 2026 | PyPI mflux-streamlit |
Malicious release: Malicious code in dreamgen (PyPI) MAL-2026-5313, PYSEC-2026-1068 | Malicious | Not scored | 06 Jun, 2026 | PyPI dreamgen |
Malicious release: Malicious code in embiggen (PyPI) MAL-2026-5314, PYSEC-2026-231 | Malicious | Not scored | 06 Jun, 2026 | PyPI embiggen |
Malicious release: Malicious code in ensmallen (PyPI) MAL-2026-5315, PYSEC-2026-232 | Malicious | Not scored | 06 Jun, 2026 | PyPI ensmallen |
Malicious release: Malicious code in gpsea (PyPI) MAL-2026-5316, PYSEC-2026-233 | Malicious | Not scored | 06 Jun, 2026 | PyPI gpsea |
Malicious release: Malicious code in instructor-mcp (PyPI) MAL-2026-5317, PYSEC-2026-1069 | Malicious | Not scored | 06 Jun, 2026 | PyPI instructor-mcp |
Malicious release: Malicious code in langchain-core-mcp (PyPI) MAL-2026-5318, PYSEC-2026-1070 | Malicious | Not scored | 06 Jun, 2026 | PyPI langchain-core-mcp |
Malicious release: Malicious code in mem8 (PyPI) MAL-2026-5319, PYSEC-2026-1071 | Malicious | Not scored | 06 Jun, 2026 | PyPI mem8 |
Malicious release: Malicious code in orchestr8-platform (PyPI) MAL-2026-5321, PYSEC-2026-1073 | Malicious | Not scored | 06 Jun, 2026 | PyPI orchestr8-platform |
Malicious release: Malicious code in phenopacket-store-toolkit (PyPI) MAL-2026-5322, PYSEC-2026-234 | Malicious | Not scored | 06 Jun, 2026 | PyPI phenopacket-store-toolkit |
Malicious release: Malicious code in ppkt2synergy (PyPI) MAL-2026-5323, PYSEC-2026-235 | Malicious | Not scored | 06 Jun, 2026 | PyPI ppkt2synergy |
Malicious release: Malicious code in pyphetools (PyPI) MAL-2026-5324, PYSEC-2026-236 | Malicious | Not scored | 06 Jun, 2026 | PyPI pyphetools |
Malicious release: Malicious code in ray-mcp-server (PyPI) MAL-2026-5325, PYSEC-2026-1074 | Malicious | Not scored | 06 Jun, 2026 | PyPI ray-mcp-server |
Malicious release: Malicious code in anthropy (PyPI) MAL-2026-5273 | Malicious | Not scored | 05 Jun, 2026 | PyPI anthropy |
Malicious release: Malicious code in goodoltoulas (PyPI) MAL-2026-5272 | Malicious | Not scored | 05 Jun, 2026 | PyPI goodoltoulas |
Malicious release: Malicious code in goodoldtoulas (PyPI) MAL-2026-5271 | Malicious | Not scored | 05 Jun, 2026 | PyPI goodoldtoulas |
Malicious release: Malicious code in reactvora (npm) GHSA-x4gw-cjrp-c89f, MAL-2026-5270 | Malicious | Not scored | 05 Jun, 2026 | npm reactvora |
Malicious release: Malicious code in glyphr (npm) GHSA-c988-j68q-h8h4, MAL-2026-5269 | Malicious | Not scored | 05 Jun, 2026 | npm glyphr |
Malicious release: Malicious code in ulid-os (npm) GHSA-fxhm-35h8-7jc7, MAL-2026-5268 | Malicious | Not scored | 05 Jun, 2026 | npm ulid-os |